This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json) Hash identifier: ZpZDl+q6POBIYh/VE/kkz0/rrbJRmf4S3breZa/Mhag= Subject key identifier: 14:A9:CA:11:9D:35:1B:34:08:A7:3F:AC:0C:61:68:16:98:2C:55:E7 Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Certificate serial: 019B3EA34CA82C4D656A973FFAC81D1C06A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft Manifest number: 0493 Signing time: Sun 21 Dec 2025 02:00:47 +0000 Manifest this update: Sun 21 Dec 2025 02:00:47 +0000 Manifest next update: Mon 22 Dec 2025 02:00:47 +0000 Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: OKmF8zjhG8VV+2TR2QVK3Y9GWTU/R1uny9/V4sqxbSY=) 2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=) 3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=) 4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:4c:a8:2c:4d:65:6a:97:3f:fa:c8:1d:1c:06:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Validity Not Before: Dec 21 02:00:47 2025 GMT Not After : Dec 22 02:00:47 2025 GMT Subject: CN=14a9ca119d351b3408a73fac0c616816982c55e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:d8:98:2d:ff:25:e3:1d:28:2c:69:46:7a: 39:b9:94:9e:94:9d:c9:ab:6f:64:40:38:55:12:bd: 77:ce:cb:87:8e:38:23:2a:b6:8a:f7:dd:04:45:2b: ac:b8:3a:42:d1:9c:94:17:ec:39:34:e7:c8:4a:18: 8f:60:36:ea:52:8a:ff:9e:67:74:5f:02:69:98:09: 67:ef:38:ba:a9:0e:d0:88:81:20:f5:a6:a3:b0:28: bf:57:42:91:ab:d5:e7:12:27:57:ff:72:22:2d:e9: 34:92:6d:be:af:51:92:2a:0c:3b:9f:04:11:d5:6a: 40:90:e5:c7:dd:d4:4b:c2:3d:7f:6f:b4:66:bf:fd: 9f:1b:8c:8f:c8:27:43:bc:47:90:a4:b6:59:67:dc: bd:21:7c:37:30:43:11:55:1c:4f:d8:59:72:39:7d: 4b:65:50:58:5e:d4:64:97:23:13:7b:de:db:25:fc: 13:71:06:8e:a5:7d:a6:88:0d:a6:4c:07:f2:be:17: 7e:61:4d:0c:14:52:0f:f9:ba:db:f2:d1:50:10:23: b7:65:da:4e:5b:af:90:e9:54:81:fd:ac:ba:6e:ef: 89:77:aa:22:d9:63:c9:f4:85:c6:37:ee:e3:a7:6f: 2c:bb:d4:33:c9:71:51:a1:73:ee:fe:d2:b0:aa:92: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A9:CA:11:9D:35:1B:34:08:A7:3F:AC:0C:61:68:16:98:2C:55:E7 X509v3 Authority Key Identifier: keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b6:14:b5:e1:38:01:d4:2c:f5:32:fe:7a:01:ce:8d:e9:93: cc:f4:dc:a3:28:42:d7:84:09:0c:a9:7f:48:11:b5:ca:25:73: 48:95:06:21:bd:98:73:18:38:3a:94:71:19:b9:c4:bd:0d:a9: 16:15:b2:06:2e:08:f8:84:ee:22:08:e0:34:cc:75:5b:3c:56: 1c:ce:8d:10:fb:91:fe:b3:a9:fe:81:e9:90:e8:5d:2c:02:12: 21:1d:88:98:1a:68:25:80:35:ef:8e:0f:42:d8:c7:7d:2c:f6: 24:ca:79:e9:12:8e:ad:8c:b4:b4:53:65:72:34:fa:ca:a5:5f: 98:80:48:2b:62:43:de:64:e0:84:1b:1a:5b:0e:c7:bc:0a:ac: d7:d1:06:43:de:62:da:6c:8e:52:93:f9:12:27:fe:c1:fe:45: df:bd:c4:2b:57:c1:a6:36:75:1c:eb:8f:bf:3f:fe:c3:bf:c3: fb:f8:89:66:10:67:f5:44:30:55:44:a6:e9:65:58:f1:45:79: 8b:ff:76:1d:5c:29:ac:a7:5a:3c:6b:b2:fd:22:8a:96:c9:0e: a2:75:89:0f:45:dd:4b:8a:85:78:2e:2f:b9:e7:1e:d1:ef:c9: 19:6d:6c:0f:c3:40:99:ee:64:5c:84:03:ef:e0:07:00:8a:7e: 6a:94:1d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o0yoLE1lapc/+sgdHAanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGEyMjRkZTZkYWQxYTFlZDEzMWI1Zjk1YjgzMjMxYTJh YmNhZjEwHhcNMjUxMjIxMDIwMDQ3WhcNMjUxMjIyMDIwMDQ3WjAzMTEwLwYDVQQD EygxNGE5Y2ExMTlkMzUxYjM0MDhhNzNmYWMwYzYxNjgxNjk4MmM1NWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA/YmC3/JeMdKCxpRno5uZSelJ3J q29kQDhVEr13zsuHjjgjKraK990ERSusuDpC0ZyUF+w5NOfIShiPYDbqUor/nmd0 XwJpmAln7zi6qQ7QiIEg9aajsCi/V0KRq9XnEidX/3IiLek0km2+r1GSKgw7nwQR 1WpAkOXH3dRLwj1/b7Rmv/2fG4yPyCdDvEeQpLZZZ9y9IXw3MEMRVRxP2FlyOX1L ZVBYXtRklyMTe97bJfwTcQaOpX2miA2mTAfyvhd+YU0MFFIP+brb8tFQECO3ZdpO W6+Q6VSB/ay6bu+Jd6oi2WPJ9IXGN+7jp28su9QzyXFRoXPu/tKwqpIJ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSpyhGdNRs0CKc/rAxhaBaYLFXnMB8GA1UdIwQY MBaAFPAKIk3m2tGh7RMbX5W4MjGiq8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgt NzUxOWUxMDVhZWRhLzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgtNzUxOWUxMDVhZWRh LzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrYUteE4 AdQs9TL+egHOjemTzPTcoyhC14QJDKl/SBG1yiVzSJUGIb2Ycxg4OpRxGbnEvQ2p FhWyBi4I+ITuIgjgNMx1WzxWHM6NEPuR/rOp/oHpkOhdLAISIR2ImBpoJYA1744P QtjHfSz2JMp56RKOrYy0tFNlcjT6yqVfmIBIK2JD3mTghBsaWw7HvAqs19EGQ95i 2myOUpP5Eif+wf5F373EK1fBpjZ1HOuPvz/+w7/D+/iJZhBn9UQwVUSm6WVY8UV5 i/92HVwprKdaPGuy/SKKlskOonWJD0XdS4qFeC4vuece0e/JGW1sD8NAme5kXIQD 7+AHAIp+apQdqw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:17 2025 by rpki-client